Our business has about 30 branch locations which are all using Cisco ASA-5505's which connect back to our Corporate ASA-5520. We pass ALL traffic over the VPN tunnel to Corporate.
On corporate end (ASA-5520) we have a object-group created which we can add hosts to which has unrestricted internet access.
object-group network Unrestricted_Access
description Unrestricted_Access_Group
network-object host 192.168.100.80
When we add hosts to this group within the corporate office it works and they get unrestricted internet access. When we add a host from one of the remote Easy VPN ASA-5505's it doesn't work.
network-object host 192.168.219.80 (remote IP from one of the Easy VPN branches)
What am I missing ?
On the corporate ASA-5520 the remote branches are defined by object-group as well
object-group network Remote_Branch_219
description Remote_Branch_219
network-object 192.168.219.0 255.255.255.0
I have tried added the remote branch defined group to the unrestricted group on the corporate 5520 and that doesn't work either.
